1 Answer
1

Umm, possibly because you've got the access group WLAN applied to traffic coming in the wlan interface, and that access group doesn't permit traffic to web servers.

The error message is pretty clear that the problem lies with the access-group WLAN, and that access-list is pretty restrictive.

Edit in response to your comment: not that I know of, because all access-lists in PIXOS are dispositive (that is, all have an implicit deny any any at the end) - so there's no such thing as an access list that doesn't match.

Parallel commenting. Is there no way to get security-level logic in case of no match in access-list?
–
BittranceJan 13 '12 at 13:47

Nope. Once you apply an access-list to an interface security levels are no longer used for traffic on that interface. It is a very generic default configuration for very simple firewall configurations.
–
Paul AckermanJan 13 '12 at 13:58